semi-OT, but I've occasionally wondered if these botnets for hire actually come with any sort of term of use/AOP. Certain behaviours are more likely to get the

semi-OT, but I've occasionally wondered if these botnets for hire actually come with any sort of term of use/AOP. Certain behaviours are more likely to get the individual zombies identified and potentially notified and cleaned up, so you'd think the botnet herders would try to minimise (or charge a much higher rate for) those sorts of activities. I'm also curious how actually deploying to a rented/borrowed botnet is done - what's stopping the client from using a payload which nukes and replaces the controller with one of their own, stealing it from the owner?